?
Solved

effect of configure password policies on all accounts

Posted on 2006-05-17
1
Medium Priority
?
258 Views
Last Modified: 2008-03-10
Hi,
I have a few questions on SBS.  I am running SBS 2003 Premium.
1 - If I go through server management -> configure password policies, and actually configure values, will it apply to the admin account?  What about built in service accounts for MSSQL, IIS, etc?  Is this the preferred method, or should I create a GPO and configure, link that?
2 - I have several remote users on laptops out in the field.  They are using OWA and VPN to get to shares.  They are only in the office a few times a year.  I am concerned about locking them out.  I did not set these laptops up so I an unsure of the local admin passwords.
3 - What is a good method for allowing a user remote access to their PC here on site?  I have a remote user that needs to run Access databases and Great Plains accounting software.  I am thinking of setting up a 2nd public IP to route him to his desktop here in the office, (if I can get another public IP).  If I cannot, how would this be handled?  I do not want the user to RDP into the server, and I have not setup the remote work feature and do not know what it has to offer.  I do have VPN setup, so I could try having him VPN in and then RDP to his desktop....
Thanks - Wayne  
0
Comment
Question by:wspjones99
1 Comment
 
LVL 97

Accepted Solution

by:
Lee W, MVP earned 500 total points
ID: 16702329
Hi wspjones99,
> 1 - If I go through server management -> configure password policies,
> and actually configure values, will it apply to the admin account?  
> What about built in service accounts for MSSQL, IIS, etc?  Is this the
> preferred method, or should I create a GPO and configure, link that?

Accounts can be set so the password never expires.  I believe the administrator password is set like this.

Password policies apply to the whole domain, unlike MOST other policies that apply to OU and potentially child OUs.

> 2 - I have several remote users on laptops out in the field.  They are
> using OWA and VPN to get to shares.  They are only in the office a few
> times a year.  I am concerned about locking them out.  I did not set
> these laptops up so I an unsure of the local admin passwords.

If the laptops are on the domain, then you can set an admin account password.  The password policies do NOT apply to local accounts.

OWA has the ability to allow the users to change their passwords and will warn them of impending expiration.  You may need to enable something in OWA though (I THINK SBS MIGHT have it enabled by default).

> 3 - What is a good method for allowing a user remote access to their
> PC here on site?  I have a remote user that needs to run Access databases
> and Great Plains accounting software.  I am thinking of setting up a
> 2nd public IP to route him to his desktop here in the office, (if I
> can get another public IP).  If I cannot, how would this be handled?  
> I do not want the user to RDP into the server, and I have not setup
> the remote work feature and do not know what it has to offer.  I do
> have VPN setup, so I could try having him VPN in and then RDP to his desktop....


Personally, I'd go with VPN into the network and RDP to their own personal workstation.

Cheers!
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses
Course of the Month16 days, 6 hours left to enroll

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question